From 04de314e155a00e7299305c6f0ca05fd47045926 Mon Sep 17 00:00:00 2001 From: rogersb11 Date: Thu, 12 Nov 2015 04:51:38 -0500 Subject: Update sepolicy for M (WIP) Change-Id: I668e299e7c6d9927144e3eedf59d559dfa8d0b23 --- selinux/untrusted_app.te | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 selinux/untrusted_app.te (limited to 'selinux/untrusted_app.te') diff --git a/selinux/untrusted_app.te b/selinux/untrusted_app.te new file mode 100644 index 0000000..e4106d5 --- /dev/null +++ b/selinux/untrusted_app.te @@ -0,0 +1,6 @@ +allow untrusted_app block_device:dir { open read search }; +allow untrusted_app log_device:chr_file { open write }; +allow untrusted_app kernel:system { module_request }; +allow untrusted_app firmware_camera:dir { read getattr open }; +allow untrusted_app firmware_camera:file getattr; +allow untrusted_app firmware_mfc:file getattr; -- cgit v1.2.3